This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa File: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (raw, json) Hash identifier: ZDbKc+ruTVuJcD/7oHmgIVR/dNEAa6RIgBC5ZgynInI= Subject key identifier: CF:D9:BF:4E:75:97:46:E8:78:F1:93:66:8C:31:30:55:D1:D3:24:D1 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 2EDC1E2E1C89B530AB08D2F7A029F5C30425ABD0 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa Signing time: Sun 14 Dec 2025 11:00:02 +0000 ROA not before: Sun 14 Dec 2025 10:55:02 +0000 ROA not after: Sun 13 Dec 2026 11:00:02 +0000 asID: 150257 IP address blocks: 103.30.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 09:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:dc:1e:2e:1c:89:b5:30:ab:08:d2:f7:a0:29:f5:c3:04:25:ab:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Dec 14 10:55:02 2025 GMT Not After : Dec 13 11:00:02 2026 GMT Subject: CN=CFD9BF4E759746E878F193668C313055D1D324D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:39:8d:a7:85:c1:f8:81:58:67:a2:59:93: 38:a3:b0:cc:dd:66:bc:cf:ad:5d:78:a1:2c:f3:e7: 29:6f:3c:ce:1f:2f:a5:43:1a:63:a0:55:2d:ce:83: a1:4c:16:77:d0:69:7c:d3:d8:5d:4c:6d:56:b9:38: 96:4f:6b:90:38:d0:1d:be:9b:ac:ce:7e:ef:0d:67: 30:b0:47:9e:4f:1a:51:e7:51:08:6f:04:eb:4f:0e: 61:6c:7f:ee:df:55:14:11:65:0e:c0:5a:74:98:b0: 83:86:22:f7:a1:c3:cc:40:6c:52:61:74:2e:36:00: b4:8e:2f:9d:25:5b:88:41:3a:e0:26:64:e1:08:25: 32:a7:3b:03:c8:b3:fb:8a:6f:d0:45:8f:ff:4f:d4: fa:80:ac:c0:02:fe:31:33:3c:25:75:9f:1f:ad:7b: 36:c9:e9:d2:8b:b9:94:ee:2d:85:84:35:ed:77:6c: 55:1f:4d:8e:8e:b6:73:5a:ad:2d:b8:e7:8b:a4:2a: 2b:a3:08:cf:81:32:f0:d5:49:be:0e:1a:f1:4c:f9: 4d:0d:42:e8:fc:75:9a:4e:ca:ba:67:f4:ac:87:50: ec:e0:5c:c7:a4:95:1b:3b:7c:64:f5:25:6a:bb:40: 9e:6e:63:63:05:e3:f6:75:32:68:69:92:a1:28:45: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:BF:4E:75:97:46:E8:78:F1:93:66:8C:31:30:55:D1:D3:24:D1 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.192.0/23 Signature Algorithm: sha256WithRSAEncryption 39:cf:d4:a8:9c:94:b6:04:4f:12:6a:c1:86:d0:0e:45:7d:73: f5:fd:23:03:71:1c:0d:e5:cb:5a:8c:7b:cf:a6:cf:fb:e3:f0: 69:6f:47:f9:75:ca:dd:e7:df:bb:82:b0:e4:e4:8b:99:b6:6b: 3c:1b:2b:04:bb:ee:61:e5:63:68:42:72:86:11:fa:ea:f1:da: 34:d3:1f:b2:6d:32:60:da:e3:d7:24:12:24:6d:d1:c4:b2:f1: d6:3e:c5:d5:3f:7f:11:dd:5a:73:cc:1f:21:84:20:f2:71:83: d2:56:ec:d7:78:15:c0:31:41:99:c2:71:fc:92:99:0d:6c:ea: 51:1b:cc:00:c8:4a:f1:1a:bf:cc:2e:32:a1:c2:28:3f:28:a7: e0:d9:fc:0c:de:ab:84:12:22:1b:f6:66:75:ee:a7:f2:13:a7: aa:38:ca:0b:8d:3b:f0:bb:fe:be:18:9a:f9:62:82:3d:b1:cd: 78:0c:a6:dc:9c:a0:d5:14:1b:24:5d:a8:77:68:2a:30:0e:7b: b1:3a:1e:2e:22:7b:cb:96:3b:ce:c2:e2:f4:80:77:49:d7:ce: b1:01:82:d4:d2:fb:1a:4c:cb:39:84:2c:27:29:aa:2c:f4:fc: 65:6a:1a:29:28:e8:06:54:e2:24:d1:7a:cb:e5:77:a6:2e:f0: d5:c6:eb:f3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULtweLhyJtTCrCNL3oCn1wwQlq9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNTEyMTQxMDU1MDJaFw0yNjEyMTMxMTAwMDJaMDMxMTAvBgNV BAMTKENGRDlCRjRFNzU5NzQ2RTg3OEYxOTM2NjhDMzEzMDU1RDFEMzI0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLjmNp4XB+IFYZ6JZkzijsMzd ZrzPrV14oSzz5ylvPM4fL6VDGmOgVS3Og6FMFnfQaXzT2F1MbVa5OJZPa5A40B2+ m6zOfu8NZzCwR55PGlHnUQhvBOtPDmFsf+7fVRQRZQ7AWnSYsIOGIvehw8xAbFJh dC42ALSOL50lW4hBOuAmZOEIJTKnOwPIs/uKb9BFj/9P1PqArMAC/jEzPCV1nx+t ezbJ6dKLuZTuLYWENe13bFUfTY6OtnNarS2454ukKiujCM+BMvDVSb4OGvFM+U0N Quj8dZpOyrpn9KyHUOzgXMeklRs7fGT1JWq7QJ5uY2MF4/Z1MmhpkqEoRUFhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUz9m/TnWXRuh48ZNmjDEwVdHTJNEwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlNjFlNWFlLWU0NWYtNGVlMy04 ZjZiLTdjYjU5ZDYxNzgzYi8wLzMxMzAzMzJlMzMzMDJlMzEzOTMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZx7AMA0GCSqG SIb3DQEBCwUAA4IBAQA5z9SonJS2BE8SasGG0A5FfXP1/SMDcRwN5ctajHvPps/7 4/Bpb0f5dcrd59+7grDk5IuZtms8GysEu+5h5WNoQnKGEfrq8do00x+ybTJg2uPX JBIkbdHEsvHWPsXVP38R3VpzzB8hhCDycYPSVuzXeBXAMUGZwnH8kpkNbOpRG8wA yErxGr/MLjKhwig/KKfg2fwM3quEEiIb9mZ17qfyE6eqOMoLjTvwu/6+GJr5YoI9 sc14DKbcnKDVFBskXah3aCowDnuxOh4uInvLljvOwuL0gHdJ186xAYLU0vsaTMs5 hCwnKaos9PxlahopKOgGVOIk0XrL5XemLvDVxuvz -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:29 2025 by rpki-client